Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
File:                     ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa (raw, json)
Hash identifier:          zS7g8NAPxHIrz8GXQJa7agPodp1urADT9DEkFgFHiGE=
Subject key identifier:   28:DC:15:5D:11:72:12:FA:71:5D:2C:4F:91:27:68:CF:2B:EA:B7:6F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F4975F5456ECF40E02FF57700
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        216.139.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f5:45:6e:cf:40:e0:2f:f5:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=52553acb-0230-4738-a2aa-bd51ebff1685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:b0:c8:4c:07:3f:16:0c:c0:81:be:f2:2a:
                    36:ec:86:c8:f9:73:33:13:cb:fc:d7:31:c1:9e:31:
                    df:fc:7e:2a:5e:95:a1:b0:6e:de:b5:13:96:ea:3a:
                    0f:ab:9f:34:ea:78:cc:ad:0c:05:26:7c:92:29:74:
                    c1:79:78:a6:0e:23:f2:59:e6:ac:3b:a0:71:bb:82:
                    6a:f5:dc:d4:91:9f:7e:24:bd:d6:cc:a3:26:31:f4:
                    08:42:cd:d9:cb:f8:1c:fd:55:63:b7:13:76:17:d7:
                    b9:e3:cc:db:61:45:b5:fe:11:5f:e9:32:b9:a7:b9:
                    06:7b:3d:f9:09:cb:d7:25:8f:7e:34:08:18:f9:00:
                    ac:c9:f8:93:9f:59:45:8f:6d:19:a7:6c:3d:92:1a:
                    e9:26:0f:46:26:8b:62:f0:39:a4:7b:83:8a:c5:41:
                    bd:a2:75:5e:81:3d:2a:52:fb:cc:df:ec:40:18:5c:
                    a2:19:aa:0c:7e:bf:95:3b:f0:2b:e3:13:9c:c3:38:
                    d5:64:ea:37:90:3a:69:16:65:a8:9b:48:00:b0:72:
                    46:8a:0a:55:57:57:c8:bc:86:08:cb:a6:1c:c0:9a:
                    4b:07:8b:3b:6d:36:50:83:ca:f7:ea:be:ad:89:88:
                    1c:dd:85:a1:38:68:8b:e0:93:c6:4d:56:1d:3d:f4:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DC:15:5D:11:72:12:FA:71:5D:2C:4F:91:27:68:CF:2B:EA:B7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:78:18:d1:ca:a2:32:32:08:f3:06:ab:b1:4b:49:e6:2a:
         57:24:24:79:7d:8b:cd:22:0c:37:d6:0c:18:bc:ce:0a:12:2a:
         bb:b2:01:a3:40:b8:e9:be:1a:b3:6d:2d:fd:d3:95:24:19:93:
         25:7e:90:6d:7c:4e:e0:e1:c4:d8:a3:2e:f1:95:22:4b:e9:15:
         87:01:66:f5:0a:52:4f:e4:90:2a:b7:a4:0f:b1:f3:ab:41:8f:
         41:3d:40:b1:dd:0c:87:52:b5:c2:3c:bc:d7:91:11:ef:89:c1:
         96:76:21:63:57:1a:b7:7e:93:c5:5a:ff:c2:e0:d4:da:77:a5:
         f1:58:4e:cd:2d:9d:70:dc:49:9a:37:9b:54:a9:23:03:22:71:
         da:47:51:07:53:4d:5c:44:3f:43:8e:69:cd:0c:cc:d8:92:bf:
         1e:ef:37:65:e3:5d:c3:1a:11:ba:51:6a:0e:40:0c:8a:00:ea:
         c4:1a:ce:9c:9d:28:e5:2f:b0:9e:0e:a2:80:0f:c5:83:37:54:
         9b:e5:ac:67:c4:be:e4:2c:5e:14:67:da:86:72:00:18:46:71:
         c4:1a:bc:ab:23:ce:23:e4:f0:54:3e:ef:4f:be:5a:ed:f6:5e:
         30:c8:aa:6c:86:87:f8:a4:47:eb:cd:8e:38:9a:56:34:78:ad:
         6f:54:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:18:07 2026 by rpki-client